Earlier today, Codemasters’ Community Relations Director Satine made an announcement on their forum to report the following breaches.

Codemasters.com website
Access to the Codemasters corporate website and sub-domains.

DiRT 3 VIP code redemption page
Access to the DiRT 3 VIP code redemption page.

The Codemasters EStore
We believe the following have been compromised: Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history. Please note that no personal payment information was stored with Codemasters as we use external payment providers, meaning your payment details were not at risk from this intrusion.

Codemasters CodeM database
Members’ names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags are all believed to have been compromised.

Whilst we do not have confirmation that any of this data was actually downloaded onto an external device, we have to assume that, as access was gained, all of these details were compromised and/or stolen.

The Codemasters.com website will remain offline for the foreseeable future with all Codemasters.com traffic re-directed to the Codemasters Facebook page instead. A new website will launch later in the year.

As Satine states, it’s not clear whether the data was just accessed or if it was in-fact an entry to gain private data. For the millions of people who use one or two global passwords, attacks like this should cause real concern. With Gawker hit last year, Deus Ex in early May, Sony losing hundreds of millions and now this, it could be a good time to check out some clever solutions to your online security needs.

http://www.ripten.com/2011/06/10/codemasters-website-hacked-data-compromised/

Posted: Jun 10, 2011 2:02 pm